EAST Search History 



Ref 

# 


Hits 


Search Query 


DBs 


Default 
Operator 


Plurals 


Time Stamp 


SI 


1533 


713/201.ccls. 


USPAT 


OR 


OFF 


2006/02/13 18:41 


S2 


629 


713/201.ccls. and java 


US-PGPUB; 
USPAT 


OR 


OFF 


2005/03/08 15:24 


S3 


63 


713/201.ccls. and java and LDAP 


US-PGPUB; 
USPAT 


OR 


OFF 


2005/03/08 15:25 


S4 


47 


713/201.ccls. and java and LDAP 
and (web adj server$2) 


US-PGPUB; 
USPAT 


OR 


ON 


2005/03/08 15:26 


S5 


10 


713/201.ccls. and java and LDAP 
and (web adj server$2) and ((rule$2 
with valid$8)) 


US-PGPUB; 
USPAT 


OR 


ON 


2005/03/08 15:36 


S6 


1 


"6085030".pn. 


US-PGPUB; 
USPAT 


OR 


ON 


2005/03/08 15:36 


S7 


204 


java and LDAP and (web adj 
server$2) and ((rule$2 with 
valid$8)) 


US-PGPUB; 
USPAT 


OR 


ON 


2005/03/08 15:36 


S8 


1 


java and LDAP and (web adj 
server$2) and ((rule$2 with valid$8) 
with stor$5 with server$2) 


US-PGPUB; 
USPAT 


OR 


ON 


2007/09/02 13:43 


S9 


3 


java and (web adj server$2) and 
((rule$2 with valid$8) with stor$5 
with server$2) 


US-PGPUB; 
USPAT 


OR 


ON 


2005/03/09 12:27 


S10 


0 


713/200.ccls. and java with valid$5 
with (function$5 code$5) 


US-PGPUB; 
USPAT 


OR 


ON 


2005/03/09 12:28 


Sll 


1 


713/200.ccls. and java same valid$5 
with (function$5 code$5) 


US-PGPUB; 
USPAT 


OR 


ON 


2005/03/09 12:28 


S12 


1 


"6327652" Dn 


USPAT 


OR 


OFF 


2005/03/11 17:00 


S13 


1 


"4319323" Dn 


USPAT 


OR 


OFF 


2005/03/11 17:00 


S14 


29 


validation with sequence with 
( Drioritv level") 


USPAT 


OR 


OFF 


2007/09/02 13:42 


S15 


237 


validation near3 sequence 


USPAT 


OR 


OFF 


2005/09/01 15:56 


S16 


7 


validation near3 sequence. ab. 


USPAT 


OR 


OFF 


2005/09/01 15:56 


S17 


18 


validation near3 sequence and 
"7137$ eels 


USPAT 


OR 


OFF 


2005/09/01 15:59 


S18 


o 


( access adi list^ with fweb adi form^ 


USPAT 


OR 


OFF 


2005/09/01 16:00 


S19 


0 


(validation adj list) with (web adj 
form) 


USPAT 


OR 


OFF 


2005/09/01 16:00 


S20 


4 


(validation adj list) with (form) 


USPAT 


OR 


OFF 


2005/09/01 16:03 


S21 


2 


access adj list.ti. 


USPAT 


OR 


OFF 


2005/09/01 20:07 


S22 


0 


vpn with timeout with server with 
client 


USPAT 


OR 


OFF 


2005/09/01 20:09 
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S23 


0 


vpn with timeout with server with 
client 


US-PGPUB; 
USPAT 


OR 


OFF 


2005/09/01 20:09 


S24 


0 


vpn with (timeout time-out time adj 
out) with server with client 


US-PGPUB; 
USPAT 


OR 


OFF 


2005/09/01 20:09 


S25 


17 


vpn with (timeout time-out time adj 
out) 


US-PGPUB; 
USPAT 


OR 


OFF 


2005/09/01 20:28 


S26 


176 


firewall with server with database 
with internet 


US-PGPUB; 
USPAT 


OR 


OFF 


2005/09/01 20:30 


S27 


1 


firewall with server with database 
with internet.ab. 


US-PGPUB; 
USPAT 


OR 


OFF 


2005/09/01 20:28 


S28 


181 


firewall and internet. ti. 


USPAT 


OR 


OFF 


2005/09/01 20:30 


S29 


64 


firewall and internet and database, 
ti. 


USPAT 


OR 


OFF 


2005/09/02 10:44 


S30 


1 


"6813644".pn. 


USPAT 


OR 


OFF 


2005/09/02 10:47 


S31 


756 


rosen.in. 


US-PGPUB 


OR 


OFF 


2005/09/02 10:47 


S32 


1 


rosen.in. and rekhter.in. 


US-PGPUB 


OR 


OFF 


2005/09/02 10:48 


S33 


0 


"6526056".pn. 


US-PGPUB 


OR 


OFF 


2005/09/02 10:48 


S34 


1 


"6526056".pn. 


US-PGPUB; 
USPAT 


OR 


OFF 


2005/09/02 10:48 


S35 


1 


"6665662".pn. 


USPAT 


OR 


OFF 


2006/02/13 18:41 


S36 


2 


"6665662".pn. "6816864".pn. 


USPAT 


OR 


OFF 


2006/02/13 18:44 


S3 7 


2 


"6718332".pn. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2006/02/14 11:41 


S38 


2 


"5813017".pn. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2006/02/14 11:48 


S39 


26116 


(validat$4 with (function$4 
method$4 rul$2)) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2006/02/14 11:48 


S40 


7633 


(validat$4 with (function$4 
method$4 rul$2)) and (java web) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2007/09/02 13:45 
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S41 


3861 


(validat$4 with (function$4 
method$4 rul$2)) and (java web) 
and (data with validat$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2007/09/02 13:45 


S42 


162 


(validat$4 with (function$4 
method$4 rul$2)) and (java web) 
and (data with validat$4) and (hash 
adj table$2) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2007/09/02 13:47 


S43 


3 


(validat$4 with (function$4 
method$4 rul$2)) and (java web) 
and (data with validat$4) and (hash 
adj table$2) and (application adj 
(version tag)) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2006/02/14 17:40 


S44 


1 


(validat$4 with (function$4 
method$4 rul$2)) and (java web) 
and (data with validat$4) and (hash 
adj table$2) and (application adj 
(version tag)) and (order with 
execut$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2006/02/14 17:41 


S46 


12 


(validat$4 with (function$4 
method$4 rul$2)) and (java web) 
and (data with validat$4) and 
(application adj (version tag)) and 
(order with execut$4) and data 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2006/02/14 18:01 


S47 


0 


(data adj validat$$) with (tiered 
hiearchical$4) 


USPAT 


OR 


OFF 


2006/02/14 18:39 


S48 


0 


(data adj validat$$) with (tiered 
hiearchical$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2006/02/14 18:39 


S49 


29 


(validat$$) with (tiered 
hiearchical$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2006/02/15 11:30 


S50 


695 


(data near3 validat$4).ti. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2006/02/15 11:30 
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S51 


24 


(data near3 validat$4).ti. and 
(execut$4 near2 (order$3 
sequenc$4)) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2006/02/15 17:49 


S52 


29 


(validat$4) with (date time) with 
(telephone near4 service) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/02/15 18:15 


S53 


183 


access$2 with rule with (telephone 
phone) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/02/15 18:16 


S54 


38 


access$2 with rule with (telephone 
phone) same (date time) 


US-PGPUB; 

USPAT;' 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/02 13:48 


S55 


33 


validat$4 with rule same (telephone 
phone) same (date time) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/02/15 21:58 


S56 


990 


707/7.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/02 13:48 


S57 


14 


S56 and (validat$4 near3 (data)) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/02/15 22:08 


S58 


2113 


707/101.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/02 13:49 
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S59 


93 


707/101.ccls. and (validat$4 near3 
(data)) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/02/15 22:08 


S60 


47157 


(java) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/08/15 19:43 


S61 


745 


(java) and (data adj validat$6) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/08/15 19:44 


S62 


116 


(java) and (data adj validat$6) 
same ((hierarch$5) sequen$5 
order$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/08/15 19:45 


S63 


66 


(java) and (data adj validat$6) 
same ((hierarch$5) sequen$5 
order$4) and (validat$4 with 
(sequen$5 order$4 hierarch$5)) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


'ON 


2006/08/15 19:45 


S64 


24 


(java) and (data adj validat$6) 
same ((hierarch$5) sequen$5 
order$4) and (validat$4 with 
(sequen$5 order$4 hierarch$5)) and 
(validat$4 near3 rul$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/08/15 20:09 


S65 


4 


"5813017".pn. "5761668".pn. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/08/16 11:45 


S66 


2 


"6856800".pn. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/08/22 19:23 
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S67 


4 


"6278783".pn. "6594761".pn. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/08/22 19:24 


S72 


2 


"6961776". pn. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2006/08/29 19:21 


S73 


1198 


707/7.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/02 13:49 


S74 


15 


707/7.ccls. and (validat$4 
manipulat$4) with (string$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/03/08 17:13 


S75 


0 


707/7.ccls. and (isbetween) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/03/08 16:52 


S76 


0 


719/316.ccls. and (isbetween) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/03/08 16:52 


S77 


566 


719/316.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/02 13:50 


S78 


1424 


709/202. eels. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/03/08 16:54 
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S79 


11 


709/202.ccls. and (validat$4 
manipulat$4) with (string$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/03/08 16:54 


S80 


475 


709/202.ccls. and (java) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/02 13:51 


S81 


383 


709/246.ccls. and (java) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/03/08 16:55 


S82 


1729 


709/246.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/03/08 16:57 


S83 


0 


. 709/246.ccls. and (isbetween) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/02 13:50 


S84 


0 


709/248.ccls. and (isbetween) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/03/08 16:55 


S85 


763 


709/248.cc!s. 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/02 13:50 


S86 


2888 


707/101.ccls. 


US-PGPUB; 
USPAT; 
USOCR; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2007/03/08 16:56 
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S87 


859 


707/101.ccls. and (hierarchica$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/02 14:01 


S88 


34 


707/101.ccls. and (hierarchica$4) 
with (validat$4 manipulat$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/03/08 16:56 


S89 


0 


709/246.ccls. and (validat4$ with 
rule$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/03/08 16:58 


S90 


98 


709/246.ccls. and (data with 
validat$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/03/08 17:00 


S91 


23 


709/248.ccls. and (data with 
validat$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/03/08 17:00 


S92 


202 


707/101.ccls. and (data with 
validat$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/03/08 17:00 


S93 


38 


707/7.ccls. and (data with 
validat$4) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/03/08 17:13 


S94 


80 


validation with sequence with 
(priority level) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM TDB 


OR 


OFF 


2007/09/02 13:42 
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S95 


80 


validation with sequence with 
(priority level) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


OFF 


2007/09/02 13:42 


S96 


5 


java and LDAP and (web adj 
server$2) and ((rule$2 with valid$8) 
with stor$5 with server$2) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/02 13:43 


S97 


36291 


(validat$4 with (function$4 
method$4 rul$2)) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


OFF 


2007/09/02 13:43 


S98 


11544 


(validat$4 with (function$4 
method$4 rul$2)) and (java web) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


OFF 


2007/09/02 13:45 


S99 


5790 


(validat$4 with (function$4 
method$4 rul$2)) and (java web) 
and (data with validat$4) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


OFF 


2007/09/02 13:45 


SIO 
0 


223 


(validat$4 with (function$4 
method$4 rul$2)) and (java web) 
and (data with validat$4) and (hash 
adj table$2) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


OFF 


2007/09/02 13:47 


SIO 
1 


59 


access$2 with rule with (telephone 
phone) same (date time) 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBMJTDB 


OR 


ON 


2007/09/02 13:48 
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SIO 

2 


1293 


707/7.CCIS. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/02 13:48 


SIO 
3 


3269 


707/101.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/02 13:49 


SIO 
4 


1293 


707/7.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBNMTJB 


OR 


ON 


2007/09/02 13:49 


SIO 
5 


593 


719/316.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/02 13:50 


SIO 
6 


820 


709/248.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/02 13:50 


SIO 
7 


1878 


709/246.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/02 13:50 


SIO 
8 


820 


709/248. eels. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/02 13:51 
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SIO 
9 


1519 


709/202.ccls. 


US-PGPUB; 

USPAT; 

USOCR; 

FPRS; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2007/09/02 13:51 


Sll 
0 


119 


717/142.CCIS. 


US-PGPUB; 

USPAT; 

USOCR; 
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1 Fast detection of communication patterns in distributed executions 
Thomas Kunz, Michiel F. H. Seuren 

November 1997 Proceedings of the 1997 conference of the Centre for Advanced 
Studies on Collaborative research CASCON '97 

Publisher: IBM Press 

Full text available: pdf (4.21 MB ) Additional Information: full citation , abstract , references , index terms 

Understanding distributed applications is a tedious and difficult task. Visualizations based 
on process-time diagrams are often used to obtain a better understanding of the 
execution of the application. The visualization tool we use is Poet, an event tracer 
developed at the University of Waterloo. However, these diagrams are often very complex 
and do not provide the user with the desired overview of the application. In our 
experience, such tools display repeated occurrences of non-trivial commun ... 

2 Shape-based retrieval and analysis of 3D models 
^ Thomas Funkhouser, Michael Kazhdan 

August 2004 ACM SIGGRAPH 2004 Course Notes SIGGRAPH '04 

Publisher: ACM Press 

Full text available: pdf( 12.56 MB ) Additional Information: full citation , abstract 

Large repositories of 3D data are rapidly becoming available in several fields, including 
mechanical CAD, molecular biology, and computer graphics. As the number of 3D models 
grows, there is an increasing need for computer algorithms to help people find the 
interesting ones and discover relationships between them. Unfortunately, traditional text- 
based search techniques are not always effective for 3D models, especially when queries 
are geometric in nature (e.g., find me objects that fit into thi ... 



3 Fi ghting the spam wars: A remailer a p proach with restrictive aliasing 
Pawel Gburzynski, Jacek Maitan 



February 2004 ACM Transactions on Internet Technology (TOIT), volume 4 issue l 
Publisher: ACM Press 

Additional Information: full citation , abstract , references , citings , index 
terms, review 



Full text available:^ pdf(162.34 KB) 



We present an effective method of eliminating unsolicited electronic mail (so-called spam) 
and discuss its publicly accessible prototype implementation. A subscriber to our system is 
able to obtain an unlimited number of aliases of his/her permanent (protected) E-Mail 
address to be handed out to parties willing to communicate with the subscriber. It is also 
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possible to set up publishable aliases, which can be used by human correspondents to 
contact the subscriber, while being useless to h ... 

Keywords: Electronic mail, privacy, spam 



Firmato: A novel f irewa 1 1 manage men t. t_op j k it 
Yair Bartal, Alain Mayer, Kobbi Nissim, Avishai Wool 

November 2004 ACM Transactions on Computer Systems (TOCS), volume 22 issue 4 
Publisher: ACM Press 

Full text available- "pi pdf(91 7 80 KB) Additional Information: full citation , abstract , references , index terms , 
k-* ' review 

In recent years packet-filtering firewalls have seen some impressive technological 
advances (e.g., stateful inspection, transparency, performance, etc.) and wide-spread 
deployment. In contrast, firewall and security <i>management</i> technology is lacking. 
In this paper we present <i>Firmato</i>, a firewall management toolkit, with the 
following distinguishing properties and components: (1) an entity-relationship model 
containing, in a unified form, global knowledge of the sec ... 

Keywords: Security policy, firewall, management, model definition language, 
visualization 



Pen computing: a technolo g y overview and a vision 
Andre Meyer 

July 1995 ACM SIGCHI Bulletin, volume 27 issue 3 
Publisher: ACM Press 

Full text available: ^j?di(5J4. MB) Additional Information: full cita tion, abstract, citings, index terms 

This work gives an overview of a new technology that is attracting growing interest in 
public as well as in the computer industry itself. The visible difference from other 
technologies is in the use of a pen or pencil as the primary means of interaction between 
a user and a machine, picking up the familiar pen and paper interface metaphor. From 
this follows a set of consequences that will be analyzed and put into context with other 
emerging technologies and visions. Starting with a short historic ... 

Web content accessibility guidelines 1.0 
Wendy Chisholm, Gregg Vanderheiden, Ian Jacobs 
July 2001 interactions, volume 8 issue 4 

Publisher: ACM Press 

Full text available: l g),pdf(471.98 Additjona | information: full citation , references , citing s, index terms 
KB) 



7 Draft re port of the Federal Internetworkin g Requirements Panel , and selected 
^ res ponses 
Diane Fountaine 

April 1994 ACM SIGCOMM Computer Communication Review, volume 24 issue 2 
Publisher: ACM Press 

Full text available:^ „p_df(4,Jj5.MB) Additional Information: full citation, ijTdexJterrns 
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Trudy Levine 

July 1996 ACM SIGAda Ada Letters, Volume xvi issue 4 
Publisher: ACM Press 

Full text available: fijl pdf(2.45 MB) Additional Information: full citation , index terms 



9 Agents for collecting ap plication usage data over the Internet 
A. David M. Hilbert, David F. Redmiles 

May 1998 Proceedings of the second international conference on Autonomous 
agents AGENTS '98 

Publisher: ACM Press 

Full text available: ^| pdf(1.23 MB) Additional Information: full citation , references , citings , index terms 



10 Im plementin g shared manufacturing services on the World-Wide Web 

J. W. Erkes, K. B. Kenny, J. W. Lewis, B. D. Sarachan, M. W. Sobolewski, R. N. Sum 
February 1996 Communications of the ACM, volume 39 issue 2 
Publisher: ACM Press 

Full text available: pdf(404.10 KB) Additional Information: full citation , references , citing s, index terms 




11 Decentralized user authentication in a g lobal file system 

Michael Kaminsky, George Savvides, David Mazieres, M. Frans Kaashoek 
>^ October 2003 ACM SIGOPS Operating Systems Review , Proceedings of the nineteenth 
ACM symposium on Operating systems principles SOSP '03, volume 37 issue 

5 

Publisher: ACM Press 

i- n » » -i li cs*i JI( ,,, Additional Information: full citation , abstract , references , citin gs, index 

Full text available: TO pdf(144.43 KB ) a 

L - 1 terms 

The challenge for user authentication in a global file system is allowing people to grant 
access to specific users and groups in remote administrative domains, without assuming 
any kind of pre-existing administrative relationship. The traditional approach to user 
authentication across administrative domains is for users to prove their identities through 
a chain of certificates. Certificates allow for general forms of delegation, but they often 
require more infrastructure than is necessary to sup ... 

Keywords: ACL, SFS, authentication, authorization, credentials, file system, groups, 
users 



1 2 Indu s trial se s sions: bi g d ata: The SPSS skyserver: public access to the sloan di gital 
sk y server data 

Alexander S. Szalay, Jim Gray, Ani R. Thakar, Peter Z. Kunszt, Tanu Malik, Jordan Raddick, 
Christopher Stoughton, Jan vandenBerg 

June 2002 Proceedings of the 2002 ACM SIGMOD international conference on 
Management of data SIGMOD '02 

Publisher: ACM Press 

r- „', * , ,. .... . a .,r,. Additional Information: full citation , abstract , references , citings , index 

Full text available: to pdfd .48 MB) ^ 

L — 1 terms 

The SkyServer provides Internet access to the public Sloan Digital Sky Survey (SDSS) 
data for both astronomers and for science education. This paper describes the SkyServer 
goals and architecture. It also describes our experience operating the SkyServer on the 
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Internet. The SDSS data is public and well-documented so it makes a good test platform 
for research on database algorithms and performance. 

1 3 Re ports: The im pact of rese arch o n mi ddleware technolo gy 
A> Wolfgang Emmerich, Mikio Aoyama, Joe Sventek 

>^ January 2007 ACM SIGSOFT Software Engineering Notes, volume 32 issue l 
Publisher: ACM Press 

Full text available: pdf ( 2. 24 MB ) Additional Information: full citation, abstract , references , index terms 

The middleware market represents a sizable segment of the overall Information and 
Communication Technology market. In 2005, the annual middleware license revenue was 
reported by Gartner to be in the region of 8.5 billion US Dollars. In this article we address 
the question whether research had any involvement in the creation of the technology that 
is being sold in this market? We attempt a scholarly discourse. We present the research 
method that we have applied to answer this question. We then pr ... 

14 Just fast ke ying : Key agreement in a hostile internet 

A William Aiello, Steven M. Bellovin, Matt Blaze, Ran Canetti, John Ioannidis, Angelos D. 
Keromytis, Omer Reingold 

May 2004 ACM Transactions on Information and System Security (TISSEC), volume 7 

Issue 2 
Publisher: ACM Press 

Full text available - *f 5 *| pdf (324.39 KB) Additional Information: full citation , abstract , references , citings , index 
' ^ terms 

We describe Just Fast Keying (JFK), a new key-exchange protocol, primarily designed for 
use in the IP security architecture. It is simple, efficient, and secure; we sketch a proof of 
the latter property. JFK also has a number of novel engineering parameters that permit a 
variety of tradeoffs, most notably the ability to balance the need for perfect forward 
secrecy against susceptibility to denial-of-service attacks. 

Keywords: Cryptography, denial-of-service attacks 



15 Towards a Web based simulation environment 

/£jv Peter Lorenz, Thomas J. Schriber, Heiko Dorwarth, Klaus-Christoph Ritter 
>^ December 1997 Proceedings of the 29th conference on Winter simulation WSC "97 

Publisher: ACM Press, IEEE Computer Society 

Full text available: *Q pdf(638.55 KB) Additional Information: full citation , references, citings, index terms 



16 Individual submissions: The impact of research on middleware technolo gy 
/jgv Wolfgang Emmerich, Mikio Aoyama, Joe Sventek 

January 2007 ACM SIGOPS Operating Systems Review, Volume 41 Issue 1 

Publisher: ACM Press 

Full text available: *Q pdf ( 573.57 KB ) Additional Information: full citation , abstract , references , index terms 

The middleware market represents a sizable segment of the overall Information and 
Communication Technology market. In 2005, the annual middleware license revenue was 
reported by Gartner to be in the region of 8.5 billion US Dollars. In this article we address 
the question whether research had any involvement in the creation of the technology that 
is being sold in this market? We attempt a scholarly discourse. We present the research 
method that we have applied to answer this question. We then pr ... 
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Tommy Thorn 

September 1997 ACM Computing Surveys (CSUR), volume 29 issue 3 
Publisher: ACM Press 

Full text available: IB pdf(393.65 KB) Additional Information: full citation, abstract, references , citings, index 
1 terms , review 

Sun's announcement of the programming language Java more that anything popularized 
the notion of mobile code, that is, programs traveling on a heterogeneous network and 
automatically executing upon arrival at the destination. We describe several classes of 
mobile code and extract their common characteristics, where security proves to be one of 
the major concerns. With these characteristics as reference points, we examine six 
representative languages proposed for mobile code. The conclusion ... 

Keywords: Java, Limbo, Objective Caml, Obliq, Safe-Tel, distribution, formal methods, 
mobile code, network programming, object orientation, portability, safety, security, 
telescript 



1 8 Key management and key exc hang e: Efficient , DoS-resistant, secure key exchan ge 
for internet proto cols 

William Aiello, Steven M. Bellovin, Matt Blaze, John Ioannidis, Omer Reingold, Ran Canetti, 
Angelos D. Keromytis 

November 2002 Proceedings of the 9th ACM conference on Computer and 

communications security CCS '02 
Publisher: ACM Press 

Full text available- pdf(118 52 KB1 Additional Information: full citation , abstract , references , citings , index 

terms 

We describe JFK, a new key exchange protocol, primarily designed for use in the IP 
Security Architecture. It is simple, efficient, and secure; we sketch a proof of the latter 
property. JFK also has a number of novel engineering parameters that permit a variety of 
trade-offs, most notably the ability to balance the need for perfect forward secrecy 
against susceptibility to denial-of-service attacks. 

Keywords: cryptography, denial of service attacks 



19 Session 1 : The Clack graphical router: visualizing network software 
Dan Wendlandt, Martin Casado, Paul Tarjan, Nick McKeown 

September 2006 Proceedings of the 2006 ACM symposium on Software visualization 

SoftVis '06 
Publisher: ACM Press 

Full text available: *fgl] pdf(793.45 KB) Additional Information: full citation , abstract , references , index terms 

We present Clack, a graphical environment for teaching students how Internet routers 
work and other core networking concepts. Clack is a router written as a Java Applet, and 
routes live network traffic in real-time. Students can look inside the router to see how 
packets are processed, and watch the dynamics of the queues. They can modify and 
enhance the router, making it handle packets as they wish. Clack provides multiple views 
of the operational router including the full network topology, the ... 

Keywords: education, networking, router design, software visualization 



20 Chimera: hypermedia for heterogeneous software development enviroments 

v£v Kenneth M. Anderson, Richard N. Taylor, E. James Whitehead 

>^ July 2000 ACM Transactions on Information Systems (TOIS), volume 18 issue 3 
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Publisher: ACM Press 



Full text available: fg pdf (864.32 K B) 



Additional Information: full citation , abstract , references , citing s, index 
terms 



Emerging software development environments are characterized by heterogeneity: they 
are composed of diverse object stores, user interfaces, and tools. This paper presents an 
approach for providing hypermedia services in this heterogeneous setting. Central notions 
of the approach include the following: anchors are established with respect to interactive 
views of objects, rather than the objects themselves; composable, n-ary links can be 
established between a ... 

Keywords: heterogeneous hypermedia, hypermedia system architectures, link servers, 
open hypermedia systems, software development environments 
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1 Computing curricula 2001 

^ September 2001 Journal on Educational Resources in Computing (JERIC) 
Publisher: ACM Press 
Full text available: fgl pdf( 61 3.63 KB ) 



[jfj html(2.78 KB) 



Additional Information: f ull citatio n, references , citings, i ndex terms 



2 An embedded domain -specific l an guage f or t y pe-safe ser v e r -side web scri pting 
Peter Thiemann 



February 2005 ACM Transactions on Internet Technology (TOIT), volume 5 issue l 
Publisher: ACM Press 

Additional Information: full citation , abstract , references , index terms , 
review 



Full text available: ffl pdf( 336.60 KB ) 



WASH/CGI is an embedded domain-specific language for server-side Web scripting. Due 
to its reliance on the strongly typed, purely functional programming language Haskell as a 
host language, it is highly flexible and— at the same time— it provides extensive 
guarantees due to its pervasive use of type information. WASH/CGI can be structured into 
a number of sublanguages addressing different aspects of the application. The document 
sublanguage provides tools for the generation of parameteri ... 



Keywords: Interactive Web services, Web programming 



The <bi gwig> proj ect 

Claus Brabrand, Anders Moller, Michael I. Schwartzbach 

May 2002 ACM Transactions on Internet Technology (TOIT), volume 2 issue 2 
Publisher: ACM Press 

n „ , , u sn j {/C oc n ^di Additional Information: full citation, abstract, references, citings, index 
Full text available: 1 ^ pdf(58_6J3 KB . . - — . - 

l *- J " terms 

We present the results of the <bigwig> project, which aims to design and implement a 
high-level domain-specific language for programming interactive Web services. 

A fundamental aspect of the development of the World Wide Web during the last decade 
is the gradual change from static to dynamic generation of Web pages. Generating Web 
pages dynamically in dialog with the client has the advantage of providing up-to-date and 
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Fast detection of communication patterns in distributed executions 
Thomas Kunz, Michiel F. H. Seuren 

November 1997 Proceedings of the 1997 conference of the Centre for Advanced 
Studies on Collaborative research CASCON '97 

Publisher: IBM Press 

Full text available: *^!].pdf(4. 21 MB) Additional Information: full citation , abstract , references, index terms 

Understanding distributed applications is a tedious and difficult task. Visualizations based 
on process-time diagrams are often used to obtain a better understanding of the 
execution of the application. The visualization tool we use is Poet, an event tracer 
developed at the University of Waterloo. However, these diagrams are often very complex 
and do not provide the user with the desired overview of the application. In our 
experience, such tools display repeated occurrences of non-trivial commun ... 



Principled desi g n of the modern Web architecture 
Roy T. Fielding, Richard N. Taylor 

May 2002 ACM Transactions on Internet Technology (TOIT), volume 2 issue 2 
Publisher: ACM Press 

Full text available: -SI Pdf(335.47 KB) Additional Information: full citation , abstract, references , citings, index 
L - '" terms 

The World Wide Web has succeeded in large part because its software architecture has 
been designed to meet the needs of an Internet-scale distributed hypermedia application. 
The modern Web architecture emphasizes scalability of component interactions, generality 
of interfaces, independent deployment of components, and intermediary components to 
reduce interaction latency, enforce security, and encapsulate legacy systems. In this 
article we introduce the Representational State Transfer (REST) arc ... 

Keywords: Network-based applications, REST, World Wide Web 



Appli cat ions : Usin g XFo rms to sim plify Web progr amm ing 
Richard Cardone, Danny Soroker, Alpana Tiwari 

May 2005 Proceedings of the 14th international conference on World Wide Web 
WWW '05 

Publisher: ACM Press 

f— .1 . 4 i ui Jt „ „o ,. n > Additional Information: f ull citation , abstract , references , citings, index 

Full text available: TO pdf( 1.03 MB ) 3 

K= '' terms 

The difficulty of developing and deploying commercial web applications increases as the 
number of technologies they use increases and as the interactions between these 
technologies become more complex. This paper describes a way to avoid this increasing 
complexity by re-examining the basic requirements of web applications. Our approach is 
to first separate client concerns from server concerns, and then to reduce the interaction 
between client and server to its most elemental: parameter passing. ... 

Keywords: J2EE, MVC, Web application, XForms, XMLBeans, eclipse, visual builder 
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We incorporate innovations from the <bigwig> project into the Java language to provide 
high-level features for Web service programming. The resulting language, JWIG, contains 
an advanced session model and a flexible mechanism for dynamic construction of XML 
documents, in particular XHTML. To support program development we provide a suite of 
program analyses that at compile time verify for a given program that no runtime errors 
can occur while building documents or receiving form input, and ... 

Keywords: Interactive Web services, XML, data-flow analysis 
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9 Tools and approaches for developing data-intensive Web applications: a survey 
Piero Fraternali 
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The exponential growth and capillar diffusion of the Web are nurturing a novel generation 
of applications, characterized by a direct business-to-customer relationship. The 
development of such applications is a hybrid between traditional IS development and 
Hypermedia authoring, and challenges the existing tools and approaches for software 
production. This paper investigates the current situation of Web development tools, both 
in the commercial and research fields, by identifying and characte ... 

Keywords: HTML, Intranet, WWW, application, development 
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May 2002 Proceedings of the 11th international conference on World Wide Web 
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Today there is a plethora of data accessible via the Internet. The Web has greatly 
simplified the process of searching for, accessing, and sharing information. However, a 
considerable amount of Internet-distributed data still goes unnoticed and unutilized, 
particularly in the case of frequently-updated, Internet-distributed databases. In this 
paper we give an overview of WebFormulate, a Web-based visual continual query system 
that addresses the problems associated with formulating tempora ... 

Keywords: continual query, visual programming language, visual query system 
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Roy T. Fielding, Richard N. Taylor 

June 2000 Proceedings of the 22nd international conference on Software 
engineering ICSE '00 
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The World Wide Web has succeeded in large part because its software architecture has 
been designed to meet the needs of an Internet-scale distributed hypermedia system. The 
modern Web architecture emphasizes scalability of component interactions, generality of 
interfaces, independent deployment of components, and intermediary components to 
reduce interaction latency, enforce security, and encapsulate legacy systems. In this 
paper, we introduce the Representational State Tra ... 

Keywords: WWW, software architectural style, software architecture 
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An XML web service is, to a first approximation, an RPC service in which requests and 
responses are encoded in XML as SOAP envelopes, and transported over HTTP. We 
consider the problem of authenticating requests and responses at the SOAP-level, rather 
than relying on transport-level security. We propose a security abstraction, inspired by 
earlier work on secure RPC, in which the methods exported by a web service are 
annotated with one of three security levels: none, authenticated, or both authen ... 

Keywords: Web services, authentication, remote procedure call, type systems 



13 Design and im plementation of the Web-enabled NIST desi gn repository 
Simon Szykman, Ram D. Sriram 

February 2006 ACM Transactions on Internet Technology (TOIT), volume 6 issue l 
Publisher: ACM Press 
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This article describes the design and development of a design repository software' system. 
This system is a prototype implementation intended to demonstrate the role of design 
repositories as part of a vision for the next generation of product development software 
systems. This research involves not only the creation of a prototype software system, but 
is part of a broader effort that also includes the development of a core product knowledge 
representation and that seeks to address terminological ... 

14 Data inte g rity: Web a p plication security assessment by fault injection and behavior 
#v monitoring 

Yao-Wen Huang, Shih-Kun Huang, Tsung-Po Lin, Chung-Hung Tsai 
May 2003 Proceedings of the 12th international conference on World Wide Web 
WWW '03 



http://portal.acm.org/results.cfm?CFID=28718212&CFTOKEN-55382741&adv=l&COLL=... 9/4/07 



Results (page 1): +validation +form +view +field web internet 



Page 5 of 7 



Publisher: ACM Press 

Full text available' "f 5 *! pdf(4 53 MB) Additional Information: full citation , abstract , references , citin gs, index 
' ^ : terms 

As a large and complex application platform, the World Wide Web is capable of delivering 
a broad range of sophisticated applications. However, many Web applications go through 
rapid development phases with extremely short turnaround time, making it difficult to 
eliminate vulnerabilities. Here we analyze the design of Web application security 
assessment mechanisms in order to identify poor coding practices that render Web 
applications vulnerable to attacks such as SQL injection and cross-site scr ... 

Keywords: black-box testing, complete crawling, fault injection, security assessment, 
web application testing 
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David Konopnicki, Oded Shmueli 
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Publisher: ACM Press 
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The World Wide Web (WWW) is a fast growing global information resource. It contains an 
enormous amount of information and provides access to a variety of services. Since there 
is no central control and very few standards of information organization or service 
offering, searching for information and services is a widely recognized problem. To some 
degree this problem is solved by "search services," also known as "indexers," such as 
Lycos, AltaVista, Yahoo, and others. ... 

Keywords: CGI, FORMS, HTML, HTTP, PERL, World-Wide Web, query language, query 
system 
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Michael R. Wade, Peter Tingling 
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Publisher: ACM Press 

Full text available: *g| pdf( 297.63 KB ) Additional Information: full citation , abstract , references , index terms 

A review of the Information Systems literature reveals that experiments are employed 
infrequently by IS researchers. Further, there is some evidence that the use of 
experiments is not increasing and may, in fact, be declining. A relatively new approach, 
the Web experiment, is introduced as a tool for Information Systems researchers to take 
advantage of the benefits of experimental methods, while avoiding some of the costs. A 
Web experiment resides on a Web site and can be accessed online through ... 

Keywords: experimental research, internet, research methodology, web experiments 
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Web application development cuts across the HTTP protocol, the client-side presentation 
language (HTML, XML), the server-side technology (Servlets, JSP, ASP, PHP), and the 
underlying resource (files, database, information system). Consequently, web 
development concerns including functionality, presentation, control, and structure cross- 
cut, leading to tangled and scattered code that is hard to develop, maintain, and reuse. In 
this paper we analyze the cause, consequence, and remedy for this cros ... 

Keywords: JSP, adaptability, aspect-oriented programming (AOP), crosscutting concerns, 
dynamic pages, generative programming, inter-crosscutting, intra-crosscutting, model- 
view-controller (MVC), reusability, scattering, struts, tangling, web application, web 
development, web programming 



18 High d ynamic ran ge imaging 

Paul Debevec, Erik Reinhard, Greg Ward, Sumanta Pattanaik 
^ August 2004 ACM SIGGRAPH 2004 Course Notes SIGGRAPH '04 

Publisher: ACM Press 

Full text available: *Q pdf(20.22 MB ) Additional Information: full citation, abstract 

Current display devices can display only a limited range of contrast and colors, which is 
one of the main reasons that most image acquisition, processing, and display techniques 
use no more than eight bits per color channel. This course outlines recent advances in 
high-dynamic-range imaging, from capture to display, that remove this restriction, 
thereby enabling images to represent the color gamut and dynamic range of the original 
scene rather than the limited subspace imposed by current monitor ... 

19 PP-tru st-X: A system for privacy preserving trust ne g otiations 
A. Squicciarini, E. Bertino, Elena Ferrari, F. Paci, B. Thuraisingham 

July 2007 ACM Transactions on Information and System Security (TISSEC), Volume 10 
Issue 3 

Publisher: ACM Press 

Full text available: pdf(1 .05 MB) Additional Information: full citation, abstract, references, index terms 

Trust negotiation is a promising approach for establishing trust in open systems, in which 
sensitive interactions may often occur between entities with no prior knowledge of each 
other. Although, to date several trust negotiation systems have been proposed, none of 
them fully address the problem of privacy preservation. Today, privacy is one of the 
major concerns of users when exchanging information through the Web and thus we 
believe that trust negotiation systems must effectively address pr ... 

Keywords: Access control, attribute-based access control, automated trust negotiation, 
credentials, privacy, strategy 
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This paper describes a methodology for the development of WWW applications and a tool 
environment specifically tailored for the methodology. The methodology and the 
development environment are based upon models and techniques already used in the 
hypermedia, information systems, and software engineering fields, adapted and blended 
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in an original mix. The foundation of the proposal is the conceptual design of WWW 
applications, using HDM-lite, a notation for the specification of structure, nav ... 

Keywords: HTML, WWW, application, development, intranet, modeling 
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1 The <big wig > pro ject 
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Michael I. Schwartzbach 

on Internet Technology (TOIT), volume 2 issue 2 
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We present the results of the <bigwig> project, which aims to design and implement a 
high-level domain-specific language for programming interactive Web services. 

A fundamental aspect of the development of the World Wide Web during the last decade 
is the gradual change from static to dynamic generation of Web pages. Generating Web 
pages dynamically in dialog with the client has the advantage of providing up-to-date and 
tailor-made information. The development of systems ... 



Keywords: Interactive Web services, program analysis 



Defendin g again st an Inte rne t-based attack on the physical world 
Simon Byers, Aviel D. Rubin, David Kormann 

August 2004 ACM Transactions on Internet Technology (TOIT), volume 4 issue 3 
Publisher: ACM Press 

Full text available: -SI Pdf(863.61 KB) Additional Information: full citation, abstract, references, cjtings, index 

terms , review 

We discuss the dangers that scalable Internet functionality may present to the real world, 
focusing upon an attack that is simple, yet can have great impact, which we believe may 
occur quite soon. We offer and critique various solutions to this class of attack and hope 
to provide a warning to the Internet community of what is currently possible. The attack 
is, to some degree, a consequence of the availability of private information on the Web, 
and the increase in the amount of personal informati ... 

Keywords: Internet threats, automated attacks, cybercrime 
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WASH/CGI is an embedded domain-specific language for server-side Web scripting. Due 
to its reliance on the strongly typed, purely functional programming language Haskell as a 
host language, it is highly flexible and---at the same time— it provides extensive 
guarantees due to its pervasive use of type information. WASH/CGI can be structured into 
a number of sublanguages addressing different aspects of the application. The document 
sublanguage provides tools for the generation of parameteri ... 



Keywords: Interactive Web services, Web programming 
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Yujian Fu, Zhijiang Dong, Xudong He 

July 2006 Workshop proceedings of the sixth international conference on Web 
engineering ICWE '06 

Publisher: ACM Press 

Full text available: ^ pdf( 1 34.93 KB ) Additional Information: full citation , abstract , references , index terms 

Web systems are self-descriptive software components which can automatically be 
discovered and engaged, together with other web components, to complete tasks over the 
Internet. Unified Modeling Language (UML), a widely accepted object-oriented system 
modeling and design language, and adapted for software architecture descriptions for 
several years, has been used for the web system description recently. However, it is hard 
to detect the system problems, such as correctness, consistency etc., oft ... 

Keywords: UML architecture description, petri nets, software architecture model, 
temporal logic, verification and validation 
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check boosts users' confidence 
Soroush Sedaghat, Josef Pieprzyk, Ehsan Vossough 
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Malicious attacks on Web servers by intruders and hackers are prime concerns of 
organizations, administrators of Web sites, as well as users who access them. 

6 Service oriented system modelin g and a p plication: An a p proach to web services 

^ oriented modelin g and validation 
^ Yujian Fu, Zhijiang Dong, Xudong He 

May 2006 Proceedings of the 2006 international workshop on Service-oriented 
software engineering SOSE '06 

Publisher: ACM Press 

,_ „ . . .... ,=1. „ n „ D , Additional Information: full citation , abstract , references , citings, index 
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Web services provide a language-neutral, loosely-coupled, and platform independent way 
for linking applications within organizations or enterprises across the Internet. Web 
services communicate with each other via XML format messages. This paper presents a 
web service architecture model, Service-Oriented Software Architecture Model (SO-SAM), 
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which is an extension of SAM (SoftwareArchitecture Model[i6]) to the web service 
applications, as well as a validation of the model and a case study. SO-SAM ... 

Keywords: petri nets, service oriented system specification, software architecture model, 
temporal logic, verification and validation 
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Kevin D. Hufford 

April 2001 Journal of Computing Sciences in Colleges , Proceedings of the sixth 
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The Internet is rapidly expanding into the world of commerce and communication media. 
The students in many different college majors, including CS and CIS, have an increasing 
desire to learn more about the Internet and what, where, when, why and how it is used. 
The question that they have is "How can they get involved and learn about the Internet as 
it relates to their major field of interest. Our current college students are witnessing a 
phenomenal effort by organizations of all types (e.g., ... 

8 Session 6: Putting declarative programming into the we b : trans lating curr y to j 

^ j avascri pt 
Michael Hanus 

July 2007 Proceedings of the 9th ACM SIGPLAN international symposium on 
Principles and practice of declarative programming PPDP '07 

Publisher: ACM Press 

Full text available:^ pdf ( 320. 67 KB ) Additional Information: full citation , abstract , references, index terms 

We propose a framework to construct web-oriented user interfaces in a high-level way by 
exploiting declarative programming techniques. Such user interfaces are intended to 
manipulate complex data in a type-safe way, i.e., it is ensured that only typecorrect data 
is accepted by the interface, where types can be specified by standard types of a 
programming language as well as any computable predicate on the data. The interfaces 
are web based, i.e., the data can be manipulated with standard web ... 

Keywords: curry, functional logic programming, javascript, user interfaces, web 
programming 
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As a large and complex application platform, the World Wide Web is capable of delivering 
a broad range of sophisticated applications. However, many Web applications go through 
rapid development phases with extremely short turnaround time, making it difficult to 
eliminate vulnerabilities. Here we analyze the design of Web application security 
assessment mechanisms in order to identify poor coding practices that render Web 
applications vulnerable to attacks such as SQL injection and cross-site scr ... 
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Keywords: black-box testing, complete crawling, fault injection, security assessment, 
web application testing 
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On the basis of regular tree grammars, we present a formal framework for XML schema 
languages. This framework helps to describe, compare, and implement such schema 
languages in a rigorous manner. Our main results are as follows: (1) a simple framework 
to study three classes of tree languages (local, single-type, and regular); (2) classification 
and comparison of schema languages (DTD, W3C XML Schema, and RELAX NG) based on 
these classes; (3) efficient document validation algorithms for these cla ... 

Keywords: XML, interpretation, schema; tree automaton, validation 
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November 2001 ACM Transactions on Internet Technology (TOIT), volume l issue 2 
Publisher: ACM Press 
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The Internet in its present form does not protect content from censorship. It is 
straightforward to trace any document back to a specific Web server, and usually directly 
to an individual. As we discuss below, there are valid reasons for publishing a document in 
a censorship-resistant manner. Unfortunately, few tools exist that facilitate this form of 
publishing. We describe the architecture of robust systems for publishing content on the 
Web. The discussion is in the context of Publius, as that ... 

Keywords: Censorship resistance, Web publishing 



12 Net technolo g ies: T y pe-oriented construction of web user interfaces 
yjgjv Michael Hanus 

>^ July 2006 Proceedings of the 8th ACM SIGPLAN symposium on Principles and 
practice of declarative programming PPDP '06 

Publisher: ACM Press 
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This paper proposes a new technique for the high-level construction of type-safe web- 
oriented user interfaces. Our approach is useful to equip applications processing 
structured data with interfaces to manipulate these data in an efficient and maintainable 
way. The interfaces are web-based, i.e., the data can be manipulated with standard web 
browsers without any specific requirements on the client side. In order to support type- 
safe user interfaces, i.e., interfaces where users can only input ty ... 

Keywords: functional logic programming, user interfaces, web programming 
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July 2006 Proceedings of the 6th international conference on Web engineering ICWE 
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In recent years, Internet has become the platform that supports most areas in 
organizations. This fact has led to the appearance of specific tools for the construction of 
Web Information Systems (WIS). However, in these tools an absence of functionalities for 
verification and validation (V&V) of the models built has been detected. This work aims to 
redress this absence with the definition of a strategy for the specification of the models 
used in the WIS development that can be used with V&V obje ... 

Keywords: mda, uml, verification and validation, web information systems 
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t erms 

The service oriented architecture (SOA) is gaining more momentum with the advent of 
network services on the Web. A programmable and machine accessible Web is the vision 
of many,and might represent a step towards the semantic Web. However, security is a 
crucial requirement for the serious usage and adoption of the Web services technology. 
This paper enumerates design goals for an access control model for Web services. It then 
introduces an abstract general model for Web services components, along ... 

Keywords: Web services, XML, access control, security 
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Business-to-consumer electronic commerce (e-commerce), one form of which is Web- 
based shopping, is defined as electronic-based economic transactions conducted between 
individual consumers and organizations. While this form of e-commerce is forecast to 
grow rapidly for the foreseeable future, it still represents only a small fraction of total 
consumer spending. To better take advantage of and be prepared for this economic 
phenomenon, organizations need to identify and understand factors that may ... 

Keywords: diffusion of innovations, electronic commerce, trust, web-based shopping 
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This paper compares contracts presented by Web sites with earlier machine-dispensed 
contracts, focusing on the problems raised by mechanized delivery of terms. The validity 
of the offeree's assent to standard form contract terms presented in various Internet 
contracting contexts will be considered in light of older judicial decisions. These cases hold 
that the offeror using mechanized processes must take account of the reasonable 
expectations of the offeree as the key factor in order for an acce ... 

Keywords: browsewrap, clickwrap, contract, shrinkwrap 
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